Unable to perform Kerberos Authentication on Apache HTTPD

Solution Verified - Updated -

Issue

  • I use an environment with Windows clients and a Linux webserver. Active Directory provides Kerberos authentication services. I am able to use Kerberos Authentication with simple apache website, but when configuring Kerberos Authentication on a VirtualHost the authentication is unsuccessful and the logs are showing the following output :

    kerb_authenticate_user entered with user (NULL) and auth_type Kerberos
    kerb_authenticate_user entered with user (NULL) and auth_type Kerberos
    Acquiring creds for HTTP@krbtest
    Verifying client data using KRB5 GSS-API
    Client didn't delegate us their credential
    Warning: received token seems to be NTLM, which isn't supported by the Kerberos module. Check your IE configuration.
    GSS-API major_status:00010000, minor_status:00000000
    gss_accept_sec_context() failed: An unsupported mechanism was requested (, Unknown error

  • How can I use Kerberos authentication for websites, when virtual hosts should be used?

Environment

  • Red Hat Enterprise Linux (RHEL)
  • Kerberos
  • Apache HTTPD
    • mod_auth_kerb

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase of over 48,000 articles and solutions.

Current Customers and Partners

Log in for full access

Log In